// AWS / NFTABLES

AWS · nftables

nftables ruleset for AWS CIDRs. 15,877 CIDRs, refreshed daily.

// nftables_aws_allow.conf

DOWNLOAD ↓ ·

# Aws IP Ranges
# Updated: 2026-05-26 03:19:23
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 00:00 UTC
# nftables allow rules for aws

table inet filter_aws_allow {
  chain input {
    type filter hook input priority 0; policy drop;
    ip saddr 3.4.12.4/32 accept
    ip saddr 3.5.140.0/22 accept
    ip saddr 15.190.244.0/22 accept
    ip saddr 15.230.15.29/32 accept
    ip saddr 15.230.15.76/31 accept
    ip saddr 15.230.221.0/24 accept
    ip saddr 15.248.168.0/21 accept
    ip saddr 23.254.120.0/21 accept
    ip saddr 35.180.0.0/16 accept
    ip saddr 51.85.0.0/16 accept
    ip saddr 52.93.153.170/32 accept
    ip saddr 52.93.178.234/32 accept
    ip saddr 52.93.244.0/24 accept
    ip saddr 52.94.76.0/22 accept
… (15865 more lines)

// nftables_aws_deny.conf

DOWNLOAD ↓ ·

# Aws IP Ranges
# Updated: 2026-05-26 03:19:23
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 00:00 UTC
# nftables deny rules for aws

table inet filter_aws_deny {
  chain input {
    type filter hook input priority 0; policy accept;
    ip saddr 3.4.12.4/32 drop
    ip saddr 3.5.140.0/22 drop
    ip saddr 15.190.244.0/22 drop
    ip saddr 15.230.15.29/32 drop
    ip saddr 15.230.15.76/31 drop
    ip saddr 15.230.221.0/24 drop
    ip saddr 15.248.168.0/21 drop
    ip saddr 23.254.120.0/21 drop
    ip saddr 35.180.0.0/16 drop
    ip saddr 51.85.0.0/16 drop
    ip saddr 52.93.153.170/32 drop
    ip saddr 52.93.178.234/32 drop
    ip saddr 52.93.244.0/24 drop
    ip saddr 52.94.76.0/22 drop
… (15865 more lines)